Job Description

Job Summary

This role provides full-time endpoint management and Tier 2–3 technical support across Client’s Microsoft Intune / Endpoint Manager, Microsoft 365, and Azure/Entra ID environment. It focuses on device lifecycle management, security baseline enforcement, and complex incident resolution, while driving automation and continuous improvement across the endpoint environment.

Responsibilities

• Administer and support enterprise endpoint management via Microsoft Intune / Endpoint Manager, including device lifecycle, enrollment, and hybrid Azure AD (Entra ID) join.
• Design, deploy, and maintain compliance policies, security baselines, and application deployment across the managed device fleet.
• Configure and support hybrid co-management environments (SCCM with Intune) for co-managed device populations.
• Serve as Tier 3 escalation point for endpoint incidents, performing business impact analysis and driving timely resolution.
• Implement and maintain Microsoft Defender for Endpoint (EDR), Attack Surface Reduction (ASR) policies, and endpoint security hardening.
• Manage Entra ID Conditional Access policies, MFA enforcement, and sign-in risk configurations.
• Administer core Microsoft 365 workloads relevant to endpoint operations, including Exchange Online, Teams, and SharePoint Online.
• Develop PowerShell and automation scripts (e.g., Power Automate) to streamline device remediation, compliance reporting, and enrollment.
• Monitor and troubleshoot the environment using Azure Monitor, Log Analytics, and KQL queries to isolate and resolve complex issues.
• Maintain client-facing documentation and a knowledge base covering endpoint resolution workflows and standard operating procedures.

Skills and Experience

Required Qualifications

• Bachelor's degree in Information Technology, Computer Science, or a related field, or equivalent professional experience.
• 4+ years of hands-on endpoint engineering experience in enterprise environments.
• Strong hands-on expertise with SCCM/MECM, including OSD, application packaging, and patch management.
• Hands-on experience with Microsoft Intune, including configuration profiles, compliance policies, and Windows Autopilot.
• Proficiency in PowerShell scripting for endpoint automation.
• Working knowledge of Entra ID (Azure AD) concepts relevant to endpoint management (hybrid join, conditional access).
• Strong troubleshooting skills across Windows client OS, drivers, and application behavior.
• Strong verbal and written communication skills in English.

Preferred Qualifications

• Microsoft 365 Certified: Endpoint Administrator Associate or equivalent certification.
• Experience executing SCCM-to-Intune co-management or migration programs.
• Experience supporting macOS or mobile devices (iOS/Android) under MDM.
• Experience in a managed services environment supporting enterprise clients.
• Bilingual English/Spanish.

Technical Skills & Tools

• SCCM/MECM administration (collections, OSD, packaging, patching).
• Microsoft Intune / Windows Autopilot.
• PowerShell scripting.
• Entra ID (Azure AD) fundamentals for endpoint management